Vulnerabilities in langchain-ai
54 resultsCVE-2026-106119MEDIUMLangChain: MongoDBChatMessageHistory query injection can allow cross-session accessEPSS 0.5%CVE-2026-26013LOWLangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesEPSS 0.4%CVE-2026-44843HIGHLangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlistsEPSS 0.4%CVE-2024-10940MEDIUMExposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchainEPSS 0.4%CVE-2026-118667MEDIUMLangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsEPSS 0.4%CVE-2026-26019MEDIUM@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationEPSS 0.4%CVE-2026-118668HIGHLangGraph JavaScript custom authentication may permit cross-user Store accessEPSS 0.4%CVE-2026-55235MEDIUMlanggraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authenticationEPSS 0.4%CVE-2026-71433MEDIUMLangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storesEPSS 0.4%CVE-2024-5998MEDIUMDeserialization of Untrusted Data in langchain-ai/langchainEPSS 0.4%CVE-2026-25750HIGHLangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrlEPSS 0.3%CVE-2026-40190MEDIUMLangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`EPSS 0.3%CVE-2026-25528MEDIUMLangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header InjectionEPSS 0.3%CVE-2026-48121MEDIUM@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessEPSS 0.3%CVE-2024-7042MEDIUMPrompt Injection in langchain-ai/langchainjs Leading to SQL InjectionEPSS 0.3%CVE-2024-2965MEDIUMDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchainEPSS 0.3%CVE-2026-115883MEDIUMLangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesEPSS 0.3%CVE-2026-105799LOWLangChain: RediSearch Filter Injection via Unescaped Tag/Text ValuesEPSS 0.3%CVE-2026-40087MEDIUMLangChain has incomplete f-string validation in prompt templatesEPSS 0.3%CVE-2026-41481MEDIUMLangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect BypassEPSS 0.3%